Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/6zOlJAL0ILteAOaVrFQ0RrCdSTU.roa
File: 6zOlJAL0ILteAOaVrFQ0RrCdSTU.roa (raw, json)
Hash identifier: MiRRPsn/RyDY0UjWWPcGcvBwDKCjwk2K+smVBksOkOw=
Subject key identifier: EB:33:A5:24:02:F4:20:BB:5E:00:E6:95:AC:54:34:46:B0:9D:49:35
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 01A11045B52A89D190BF653978F4CE3A8DFD
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/6zOlJAL0ILteAOaVrFQ0RrCdSTU.roa
Signing time: Tue 06 Oct 2026 08:12:46 +0000
ROA not before: Tue 06 Oct 2026 08:12:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1103
IP address blocks: 145.0.0.0/16 maxlen: 24
145.2.0.0/15 maxlen: 24
145.9.0.0/16 maxlen: 24
145.19.0.0/16 maxlen: 24
145.19.0.0/24 maxlen: 24
145.20.0.0/16 maxlen: 24
145.23.0.0/16 maxlen: 24
145.23.0.0/19 maxlen: 24
145.24.0.0/16 maxlen: 24
145.28.0.0/15 maxlen: 24
145.33.0.0/16 maxlen: 24
145.37.0.0/16 maxlen: 24
145.38.0.0/15 maxlen: 24
145.41.0.0/16 maxlen: 24
145.44.0.0/16 maxlen: 24
145.48.0.0/15 maxlen: 24
145.51.0.0/16 maxlen: 24
145.52.0.0/16 maxlen: 24
145.67.0.0/16 maxlen: 24
145.74.0.0/15 maxlen: 24
145.76.0.0/16 maxlen: 24
145.81.0.0/16 maxlen: 24
145.85.0.0/16 maxlen: 24
145.85.0.0/24 maxlen: 24
145.88.0.0/15 maxlen: 24
145.90.0.0/16 maxlen: 24
145.90.10.0/23 maxlen: 24
145.91.0.0/16 maxlen: 24
145.91.0.0/24 maxlen: 24
145.92.0.0/15 maxlen: 24
145.95.0.0/16 maxlen: 24
145.96.0.0/16 maxlen: 24
145.97.0.0/20 maxlen: 24
145.97.16.0/22 maxlen: 24
145.97.20.0/22 maxlen: 24
145.97.24.0/21 maxlen: 24
145.97.48.0/20 maxlen: 24
145.97.64.0/18 maxlen: 24
145.97.128.0/18 maxlen: 24
145.97.128.0/24 maxlen: 24
145.97.192.0/18 maxlen: 24
145.98.0.0/16 maxlen: 24
145.98.16.0/24 maxlen: 24
145.100.0.0/15 maxlen: 24
145.102.0.0/16 maxlen: 24
145.103.0.0/16 maxlen: 24
145.107.0.0/16 maxlen: 24
145.107.24.0/22 maxlen: 22
145.108.0.0/16 maxlen: 24
145.109.128.0/17 maxlen: 24
145.116.0.0/20 maxlen: 24
145.116.16.0/21 maxlen: 24
145.116.24.0/21 maxlen: 24
145.116.64.0/18 maxlen: 24
145.116.128.0/18 maxlen: 24
145.116.192.0/20 maxlen: 24
145.116.224.0/19 maxlen: 24
145.117.0.0/16 maxlen: 24
145.118.0.0/16 maxlen: 24
145.120.0.0/14 maxlen: 24
145.124.0.0/15 maxlen: 24
145.126.0.0/16 maxlen: 24
145.127.0.0/17 maxlen: 24
145.136.0.0/15 maxlen: 24
145.137.128.0/18 maxlen: 24
145.138.0.0/16 maxlen: 24
145.140.0.0/14 maxlen: 24
145.144.0.0/12 maxlen: 24
145.146.0.0/16 maxlen: 24
145.160.0.0/12 maxlen: 24
145.216.0.0/15 maxlen: 24
145.217.192.0/18 maxlen: 24
192.87.0.0/16 maxlen: 24
194.171.0.0/16 maxlen: 24
195.169.0.0/16 maxlen: 24
2001:610::/29 maxlen: 29
2001:610::/32 maxlen: 48
2001:610:130::/48 maxlen: 64
2001:610:5ea::/48 maxlen: 48
2001:678:1334::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:45:b5:2a:89:d1:90:bf:65:39:78:f4:ce:3a:8d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Oct 6 08:12:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb33a52402f420bb5e00e695ac543446b09d4935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:70:b1:85:b1:3f:f7:d4:b3:c3:23:96:c2:b6:
2b:07:c8:16:fc:ba:4b:94:06:6a:da:7a:fb:18:3f:
58:aa:31:4f:7f:0b:70:5c:db:8a:37:9d:84:76:f4:
45:f3:2d:7d:23:4c:4f:d4:8b:2b:01:11:63:77:94:
b3:cc:48:7e:4b:eb:7b:e6:0e:b6:ec:ee:09:cf:15:
f4:0b:d4:58:6a:7f:c8:e7:b4:63:fc:c2:d1:47:7f:
15:80:b3:b3:c5:8a:0b:99:59:ba:7a:65:65:ef:bd:
ee:99:26:92:cd:f2:39:90:5a:67:f4:f5:38:fe:76:
28:3d:e9:a7:14:b2:cc:ea:3b:7c:e8:3c:f5:ca:69:
57:91:fe:f9:c4:8c:95:9d:23:ff:5c:1b:c4:6a:8e:
e9:4e:34:0d:d9:77:e2:07:d6:c0:4d:09:f3:27:66:
48:82:17:b1:44:dc:a2:6c:06:cd:0a:ba:5f:0f:71:
85:1a:f2:17:44:92:62:27:91:4f:70:fe:2e:90:ad:
4e:a9:0d:7f:92:e8:e1:c3:65:65:fa:7c:5c:e4:1c:
d5:c3:30:42:78:d1:e6:6e:41:93:a4:c1:90:1b:9e:
9a:62:51:a5:09:07:fa:84:3f:b8:ae:72:87:03:ac:
21:7d:5c:43:32:bc:f0:f0:5e:a5:e8:d6:f9:94:4e:
be:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:33:A5:24:02:F4:20:BB:5E:00:E6:95:AC:54:34:46:B0:9D:49:35
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/6zOlJAL0ILteAOaVrFQ0RrCdSTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.0.0.0/16
145.2.0.0/15
145.9.0.0/16
145.19.0.0-145.20.255.255
145.23.0.0-145.24.255.255
145.28.0.0/15
145.33.0.0/16
145.37.0.0-145.39.255.255
145.41.0.0/16
145.44.0.0/16
145.48.0.0/15
145.51.0.0-145.52.255.255
145.67.0.0/16
145.74.0.0-145.76.255.255
145.81.0.0/16
145.85.0.0/16
145.88.0.0-145.93.255.255
145.95.0.0-145.97.31.255
145.97.48.0-145.98.255.255
145.100.0.0/14
145.107.0.0-145.108.255.255
145.109.128.0/17
145.116.0.0/19
145.116.64.0-145.116.207.255
145.116.224.0-145.118.255.255
145.120.0.0-145.127.127.255
145.136.0.0-145.138.255.255
145.140.0.0-145.175.255.255
145.216.0.0/15
192.87.0.0/16
194.171.0.0/16
195.169.0.0/16
IPv6:
2001:610::/29
2001:678:1334::/48
Signature Algorithm: sha256WithRSAEncryption
53:00:a4:24:46:a7:34:3f:54:51:1c:a5:cf:d8:ec:85:f5:a2:
5c:81:d3:e2:69:73:7b:5b:c8:eb:b4:76:fb:7a:cf:5b:b8:a9:
cc:35:ad:a4:07:c1:44:f5:59:c6:3c:05:fb:28:1e:66:6c:d3:
75:d8:2a:55:13:34:1e:ce:05:d9:8f:fe:7e:f8:40:30:5b:79:
b5:e4:70:44:6b:e2:9b:62:c4:4a:8a:3f:30:47:bd:9d:c0:67:
5d:6c:f0:02:88:89:d0:fc:d3:90:63:06:ec:7b:9c:ee:13:c0:
15:29:15:13:d5:e1:0f:44:c1:75:33:c1:f8:c1:4e:fb:32:d2:
17:63:2f:31:7b:3b:39:0e:5a:04:1d:d4:47:2b:be:fd:1b:ca:
ba:32:78:b5:db:11:f0:a2:2a:61:7f:46:53:bc:fa:17:71:f8:
03:25:8d:dc:a9:95:9a:de:61:24:9b:43:de:0c:ff:fe:ac:71:
c3:f9:81:d5:5a:34:bd:fa:6e:71:45:c2:ae:45:c0:9b:ff:c3:
7d:b7:66:8f:c7:4e:ac:9c:85:4f:0e:10:b4:e0:8c:18:68:df:
e6:63:89:2b:26:8f:42:a2:69:59:fa:67:57:02:52:7e:83:ca:
15:3a:fa:6e:34:9b:8b:05:11:82:a9:01:22:70:74:17:06:bb:
af:05:f8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:28:14 2026 by rpki-client